{"id":3440,"date":"2021-06-18T15:18:13","date_gmt":"2021-06-18T19:18:13","guid":{"rendered":"https:\/\/solutionsreview.com\/security-information-event-management\/?p=3440"},"modified":"2021-06-18T15:18:13","modified_gmt":"2021-06-18T19:18:13","slug":"wegmans-notifies-customers-of-data-leak","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/security-information-event-management\/wegmans-notifies-customers-of-data-leak\/","title":{"rendered":"Wegmans Notifies Customers of Data Leak"},"content":{"rendered":"

\"Wegmans<\/p>\n

U.S. regional supermarket chain Wegmans informed customers that some personally identifying information data became exposed due to a data leak.\u00a0<\/i><\/b><\/p>\n

BleepingComputer<\/span><\/a> originally reported this story. In a <\/span>press release<\/span><\/a>, Wegmans stated: “We recently became aware that, due to a previously undiscovered configuration issue, two of our cloud databases, which are used for business purposes and are meant to be kept internal to Wegmans, were inadvertently left open to potential outside access.\u201d<\/span><\/p>\n

\u201cThis issue was first brought to our attention by a third-party security researcher and we then confirmed the configuration problem, beginning on or about April 19, 2021.”<\/span><\/p>\n

The Wegmans data leak appears to have exposed customers\u2019 names, addresses, phone numbers, birth dates, Shoppers Club numbers, and Wegmans.com account e-mail addresses and (salted) passwords. However, no payment information was leaked. Wegmans warned customers of a potential credential stuffing attack some months earlier.\u00a0<\/span><\/p>\n

We asked some cybersecurity<\/a><\/strong><\/span> experts for their take on the Wegmans Data Leak. Here\u2019s what they had to say.\u00a0<\/span><\/p>\n


Widget not in any sidebars
<\/span><\/p>\n

Wegmans Notifies Customers of Data Leak: Expert Commentary<\/b><\/h2>\n

Kevin Dunne<\/b><\/h3>\n

Kevin Dunne is President at<\/span><\/i> Pathlock<\/span><\/a>.\u00a0<\/span><\/p>\n

\u201cThe recent breach notification from Wegman’s highlights a recurring trend we are seeing: enterprises are storing more customer information than ever in their business applications.\u00a0 As remote work and digital transformation initiatives push these systems into the cloud, it is common to find many of these business systems are publicly available to the internet, and loosely secured.\u00a0 CISO’s and Data Privacy officers need to work with the business to understand what critical customer information is being stored where at an organization-wide level.\u00a0 Unprotected data silos that are operated by the business undermine the work that security and data teams do to maintain strict controls over the core internal systems.\u00a0 When these business systems aren’t overseen by the information security and information technology teams, they can introduce a new risk loophole that risks compliance with data privacy regulations like GDPR and CCPA.\u201d<\/span><\/p>\n

Tim Wade<\/b><\/h3>\n

Tim Wade is Technical Director, CTO Team at <\/span><\/i>Vectra<\/span><\/i><\/a>.\u00a0<\/span><\/i><\/p>\n

\u201cThe ability to detect and respond in real-time is an essential part of modern security.\u00a0 Misconfiguration issues don\u2019t seem to be going away any time soon, which means customers that rely on everything being 100 perfect correct will be sorely disappointed when reality strikes.\u00a0 There needs to be a holistic approach to security \u2013 yes, minimizing misconfiguration and hardening services is part of that holistic approach \u2013 but until organizations have a plan to identify the breach in real-time, this type of activity will continue.\u201d<\/span><\/p>\n

Trevor Morgan<\/b><\/h3>\n

Trevor Morgan is Product Manager at <\/span><\/i>comforte AG<\/span><\/i><\/a>.\u00a0<\/span><\/p>\n

\u201cLarge retailers and grocery chains collect an enormous amount of customer data. For many grocery chains, getting the best prices often means consumers give up sensitive personal information in order to obtain a loyalty card. Of course, this is the type of data that threat actors seek because it has such high value within shadow markets.<\/span><\/p>\n

These large enterprises have sophisticated IT infrastructures, and no doubt perimeter protections and data access controls serve as good baseline measures against intentional hacks and unintentional data access. However, when a reputable and popular grocery brand like Wegmans dutifully releases information about a data exposure due to configuration mishaps, it should remind organizations that those measures are baseline only because they protect the environment around data and not the data itself. To do that, you have to turn to data-centric protection methods like tokenization and format-preserving encryption, which replace sensitive data with representational information that cannot be leveraged, even if it falls into the wrong hands.<\/span><\/p>\n

By all means, Wegmans is going through the proper procedures and alerting the public about mitigation efforts, but for similar enterprises that collect, handle, and process customer data, the incident should serve as food for thought\u2014and hopefully some action.\u201d<\/span><\/p>\n

<\/div><\/p>\n

Thanks to the cybersecurity experts for their time and expertise on the Wegmans Data Leak. For more check out the SIEM Buyer\u2019s Guide<\/a><\/strong><\/span>.\u00a0<\/span><\/p>\n


Widget not in any sidebars
<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

U.S. regional supermarket chain Wegmans informed customers that some personally identifying information data became exposed due to a data leak.\u00a0 BleepingComputer originally reported this story. In a press release, Wegmans stated: “We recently became aware that, due to a previously undiscovered configuration issue, two of our cloud databases, which are used for business purposes and […]<\/p>\n","protected":false},"author":41,"featured_media":3058,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[551,1],"tags":[353,133,1598,1267,1599,95,1595,86,1597,21,22,1596,1594],"acf":[],"yoast_head":"\nWegmans Notifies Customers of Data Leak (Expert Commentary)<\/title>\n<meta name=\"description\" content=\"U.S. regional supermarket chain Wegmans informed customers that some personally identifying information data became exposed due to a data leak.\u00a0\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/security-information-event-management\/wegmans-notifies-customers-of-data-leak\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Wegmans Notifies Customers of Data Leak (Expert Commentary)\" \/>\n<meta property=\"og:description\" content=\"U.S. regional supermarket chain Wegmans informed customers that some personally identifying information data became exposed due to a data leak.\u00a0\" \/>\n<meta property=\"og:url\" content=\"https:\/\/solutionsreview.com\/security-information-event-management\/wegmans-notifies-customers-of-data-leak\/\" \/>\n<meta property=\"og:site_name\" content=\"SIEM Tools & Security Event Management | Solutions Review\" \/>\n<meta property=\"article:published_time\" content=\"2021-06-18T19:18:13+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2020\/06\/Dark-web-mod.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"800\" \/>\n\t<meta property=\"og:image:height\" content=\"400\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Ben Canner\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ben Canner\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/wegmans-notifies-customers-of-data-leak\/\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/wegmans-notifies-customers-of-data-leak\/\",\"name\":\"Wegmans Notifies Customers of Data Leak (Expert Commentary)\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/wegmans-notifies-customers-of-data-leak\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/wegmans-notifies-customers-of-data-leak\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2020\/06\/Dark-web-mod.jpg\",\"datePublished\":\"2021-06-18T19:18:13+00:00\",\"dateModified\":\"2021-06-18T19:18:13+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\"},\"description\":\"U.S. regional supermarket chain Wegmans informed customers that some personally identifying information data became exposed due to a data leak.\u00a0\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/wegmans-notifies-customers-of-data-leak\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/security-information-event-management\/wegmans-notifies-customers-of-data-leak\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/wegmans-notifies-customers-of-data-leak\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2020\/06\/Dark-web-mod.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2020\/06\/Dark-web-mod.jpg\",\"width\":800,\"height\":400,\"caption\":\"Panther Labs Releases State of SIEM 2021 Report\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/wegmans-notifies-customers-of-data-leak\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/security-information-event-management\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Wegmans Notifies Customers of Data Leak\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#website\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/\",\"name\":\"SIEM Tools & Security Event Management | Solutions Review\",\"description\":\"Evaluating Enterprise SIEM Systems, Log Management Analytics & SOAR Platforms.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/security-information-event-management\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\",\"name\":\"Ben Canner\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"caption\":\"Ben Canner\"},\"description\":\"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/author\/bcanner\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Wegmans Notifies Customers of Data Leak (Expert Commentary)","description":"U.S. regional supermarket chain Wegmans informed customers that some personally identifying information data became exposed due to a data leak.\u00a0","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/security-information-event-management\/wegmans-notifies-customers-of-data-leak\/","og_locale":"en_US","og_type":"article","og_title":"Wegmans Notifies Customers of Data Leak (Expert Commentary)","og_description":"U.S. regional supermarket chain Wegmans informed customers that some personally identifying information data became exposed due to a data leak.\u00a0","og_url":"https:\/\/solutionsreview.com\/security-information-event-management\/wegmans-notifies-customers-of-data-leak\/","og_site_name":"SIEM Tools & Security Event Management | Solutions Review","article_published_time":"2021-06-18T19:18:13+00:00","og_image":[{"width":800,"height":400,"url":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2020\/06\/Dark-web-mod.jpg","type":"image\/jpeg"}],"author":"Ben Canner","twitter_misc":{"Written by":"Ben Canner","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/wegmans-notifies-customers-of-data-leak\/","url":"https:\/\/solutionsreview.com\/security-information-event-management\/wegmans-notifies-customers-of-data-leak\/","name":"Wegmans Notifies Customers of Data Leak (Expert Commentary)","isPartOf":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/wegmans-notifies-customers-of-data-leak\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/wegmans-notifies-customers-of-data-leak\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2020\/06\/Dark-web-mod.jpg","datePublished":"2021-06-18T19:18:13+00:00","dateModified":"2021-06-18T19:18:13+00:00","author":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541"},"description":"U.S. regional supermarket chain Wegmans informed customers that some personally identifying information data became exposed due to a data leak.\u00a0","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/wegmans-notifies-customers-of-data-leak\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/security-information-event-management\/wegmans-notifies-customers-of-data-leak\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/wegmans-notifies-customers-of-data-leak\/#primaryimage","url":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2020\/06\/Dark-web-mod.jpg","contentUrl":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2020\/06\/Dark-web-mod.jpg","width":800,"height":400,"caption":"Panther Labs Releases State of SIEM 2021 Report"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/wegmans-notifies-customers-of-data-leak\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/security-information-event-management\/"},{"@type":"ListItem","position":2,"name":"Wegmans Notifies Customers of Data Leak"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#website","url":"https:\/\/solutionsreview.com\/security-information-event-management\/","name":"SIEM Tools & Security Event Management | Solutions Review","description":"Evaluating Enterprise SIEM Systems, Log Management Analytics & SOAR Platforms.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/security-information-event-management\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541","name":"Ben Canner","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","caption":"Ben Canner"},"description":"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.","url":"https:\/\/solutionsreview.com\/security-information-event-management\/author\/bcanner\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts\/3440"}],"collection":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/users\/41"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/comments?post=3440"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts\/3440\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/media\/3058"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/media?parent=3440"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/categories?post=3440"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/tags?post=3440"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}